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Clean Version of Replacement Paragraphs 




Please enter the following replacemen^paragraphs to the specification. 



1. Please amend the paragraph at page 10, line 21- page 11, line 8. as follpws: 

The computer 20 may operate in a networked environment using logical connections to one or 
more remote computers, such as remote computer 49. These logical connections are achieved by a 
communication device coupled to or a part of the computer 20; the invention is not limited to a 
particular type of communications device. The remote computer 49 may be another computer, a 
server, a router, a network PC, a client, a peer device or other common network node, and typically 
includes many or all of the elements described above relative to the computer 20, although only a 
memory storage device 50 has been illustrated in FIG. 1. The logical connections depicted in FIG. 1 
include a local-area network (LAN) 51 and a wide-area network (WAN) 52. Such networking 
environments are commonplace in office networks, enterprise-wide computer networks, intranets and 
the Internet, which are all types of networks. 



2. Please amend the paragraph at page 11. lines 9-19. as follows: 



When used in a LAN-networking environment, the computer 20 is connected to the local 
network 51 through a network interface or adapter 53, which is one type of communications device. 
When used in a WAN-networking environment, the computer 20 typically includes a modem 54, a 
type of communications device, or any other type of communications device for establishing 
communications over the wide area network 52, such as the Internet. The modem 54, which may be 
internal or external, is connected to the system bus 23 via the serial port interface 46. In a networked 
environment, program modules depicted relative to the personal computer 20, or portions thereof, 
may be stored in the remote memory storage device. It is appreciated that the network connections 
shown are exemplary and other means of and communications devices for establishing a 
communications link between the computers may be used. 
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3. Please amend the table at page 15, between lines 14 and 15, as follows: 



(1) >(0) ^ <f> (S)Mn)±{n) 

(2) fn(P\Q) ±fn(P) ufn(Q) (9) fn(in M) 4 f n (M) 

(3) M\F) ~fa{P) ( 1 0) fn{out M) 4 fn(M) 

(4) fn(M [P]) 4 f n (M) u fn(P) ( 1 1 )fn(open M) 4 

(5) >(M?) 4/ w (A0 ufn(P) (12) fa(e) A <f> 

(6) M(n).P) =fn(P)- {n} ( 1 3)fn(M .M') A f n {M) ufn(M ') 
(l)M(M)) ±fn{M) 



4. Please amend the paragraph at page 15, line 16 - page 16, line 8 as follows: 

The thirteen statements within this table are explained as follows. The first statement states 
that there are no free names for the inactivity process. The symbol = specifies that the left-hand side 

of the symbol is defined as the right-hand side of the symbol. This definition is applicable in any 
statement in which the symbol ^ appears. The second statement states that the free names for the 

I composition P\Q are the free names for P conjoined with the free names for Q. The third statement 
^ states that when a process is replicated from another process, it has the same free names as that latter 
process. The fourth statement states that the free names of a container M having therein a process P 
are the free names of M by itself conjoined with the free names of P- that is, M[P] cannot take on 
any names that are not allowed by either M itself or P itself. The fifth statement states that the free 
names of the capability action M.P cannot take on any names that are not allowed by either M itself 
or P itself. The sixth statement states that the free names of the input action (/7). Pare the free names 
of the process P, minus the name n. 
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Please amend the paragraph at page 18, line 29- page!9, line 11, as follows: 



Finally, the following syntactic conventions and abbreviations, as summarized in the next 
table, are used herein. A fact is also provided. 



Syntactic conventions 

\P\Q is read {\P)\Q 

M.P\Q is read {M.P)\Q 
{n).P\Q is read \Q 

Abbreviations 

n[ ] 4 n[0] 

M = M.O (where appropriate) 

Fact 

n[P] = m[P']\ff n = m and P = P" 



Please amend the table at page 19, following line 20, as follows: 



A,B.( 






1 


T 


true 


2 


-.A 


negation 


3 


AvB 


disjunction 


4 


"[A] 


location 


5 


A* | A" 


composition 


6 


3/7.A 


existential quantification over names 


7 


->k 


somewhere modality (spatial) 


8 


OA 


sometime modality (temporal) 


9 


A@« 


location adjunct 


10 


A>B 


composition adjunct 
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7. Please amend the paragraph at page 20, lines 1-12 as follows: 

The logical formulas of the preceding table are described as follows. The first statement is a 
logical true, while the second statement is a logical negation and the third statement is a logical 
disjunction. The fourth statement means that the process A is located within the container, or 
ambient, n. The fifth statement is a logical composition. The sixth statement specifies the existential 
quantifier operation, that there is some process A within the container named n. The seventh 
statement specifies a spatial operator, that somewhere, at some location, the process A exists. That is, 
within some container, anywhere in the domain space being considered, the process A exists. 
Similarly, the eighth statement specifies a temporal operator, that at some point in time, the process A 
will exist (or currently exists). The ninth statement specifies that the process A exists within the 
container named n. Finally, the tenth statement is a logical composition adjunct. 



8. Please amend the table on page 20, following line 12, as follows: 



1 F 


A 




false 


2AaB 


A 


— 1(— i A v — t B ) 


conjunction 


3 A => B 




-iA v B 


implication 


4AoB 


A 


(A=>B) a(B=>A) 


logical equivalence 


S A it 6 




— «(— » A | — . B ) 


decomposition 


6 !A 


A 


A u F 


every component satisfies A 


7?A 


A 


A | T (<^> — , A ) 


some component satisfies A 


8 Vw.A 


A 


^3a?.^A 


universal quantification over names 


9 h A 




^^A 


everywhere modality (spatial) 


10 a A 


A 


—.0—, A 


everytime modality (temporal) 


11 A@ 




V/7. A @n 


in every location context 


12 >A 


A 


T>A 


in every composition context 
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9. Please amend the paragraph at page 20, line 16- page 21. line 12 as follows: 

The derived connectives of the preceding table are explained as follows. The first statement is 
the logical false, and is derived and defined as a function of the logical true. The second statement is 
the logical conjunction, while the third statement is the logical implication and the fourth logical 
equivalence. The fifth statement specifies logical decomposition. The sixth statement defines !Aas 
universal satisfaction, that every component satisfies the process A. Likewise, the seventh statement 
defines ?Aas partial satisfaction, that some component satisfies the process A. The eighth statement 
defines the universal quantifier V in terms of the existential quantifier 3; that all the processes A are 
within the container n. The ninth statement states that the process A exists everywhere, from a spatial 
perspective, while the tenth statement states that the process A has existed, and still exists, at every 
time. The eleventh and twelfth statements specify the in every location context and the in every 
composition context, respectively, and are derived from the ninth and tenth logical formula 
statements of the logical formulas table. 



10. Please amend the paragraph at page 21, lines 16-17, as follows: 



Infix V binds stronger than '\\ and they both bind stronger than the standard logical 
connectives. 



11. Please amend the paragraph at page 21, line 22 - page 22, line 2 as follows: 



4 



The satisfaction relation P f=A (process P satisfies formula A) is defined inductively in the 

following tables, where Tl is the sort of processes, O is the sort of formulas, and A is the sort of 
names. Quantification and sorting of meta-variables are made explicit because of subtle scoping 
1 1 issues, particularly in the definition of P 1= 3/?.A. Similar syntax for logical connectives is used at the 

meta-level and object-level. 
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12. Please amend the table on page 22, between line 11 and line 13. as follows: 



WPT1 

V / . 1 1 . 


F I 


A_ 






r F -ill 




-n/ F A 


vyp-n A Rch 

V/ .1 J 9 H,D.M^. 


7^ F AVD 


A 


r F A v r F D 


VPTI /? A A*<t> 

vi >j i 9 /f*/\ 9 n.M- 7 * 


P b= mTAI 
7 F /?[nj 




□7 .J 1. r = ft[r J A 7 F A 


Vr.\ 1,A,D.Q>. 


n i AID 

Pt= A [ B 




3P',P":Tl. P = P'\P" A P' 1 


\/P:U, n:A, A:0>. 


P N 3/7.A 


_A 


3/w:A. P 1= k{n<^m} 


V/Ml, A:<t> 




A 


3/>':n./\L*/ > 'A/>'l=A 


V^n, A:<t> 


P^OA 


A 


3P':n. />-»*/>' a 


vp-.n, A:<t> 


P^k@n 


A 


N A 


VP:n, A,B:0. 


PhA>B 


A 





13. Please amend the paragraph on page 2zftines 19-20 as follows: 



5 • A process P satisfies the w[A] formula if there exists a process P' such that P s and P' N= A. 



14. Please amend the paragraph at page 22. lirfe^ll-22 as follows: 



a/^( • A process P satisfies the A'|B formula if there exist processes P f and P" such that P = P'\ P" 
fl with P f satisfying A ? and P" satisfying B. 



15. Please amend the paragraph at page 23, lines 6^7 as follows: 



A process P satisfies the formula OA if A holds in the future for some residual P'ofP, where 
"residual" is defined by P -> *P '. 



16. Please amend the paragraph at page 23, lines 10-14, as follows: 



it 



• A process P satisfies the formula A >B if, given any parallel context P * satisfying A, the 

1 1/ combination P % \P satisfies B. Another reading of P N >B is that P manages to satisfy B under 

any possible attack by an opponent that is bound to satisfy A. Moreover, " P satisfies (dA) > 
(□A)" means that P preserves the invariant A. 
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17. Please amend the table at page 23, between lines 14 and 16, as follows: 




ft 



\/P:U. 


-i P (= F 




VPinjJ: o. 


Pl= AaB 


iffPI= AaPI= B 


VP:n,A,B: O. 


Pl= A=>B 


iffPt=A=>PI=B 


V^FIJJ: O. 


Pl= A<»B 


iffPNAoPNB 


V^FI, A,B: O. 


PhAnB 


iff VF,P":T\. P = P'\P" => P t= A v P" t= 1 


V/>:n,A:<t>. 


Pt= !A 


iff VP',P":n. P = F\P" =>F t= A 


VP:n,A: G>. 


Pt=?A 


iff 3F,P":n. P = P'|P" a P N A 


VP :n,«: A, A: O. 


P 1= V«.A 


iffVm: A.Ph A{/?<-m} 


VP:n,A:<D. 


Pt= nA 


iffVP':n.Pi*P'=>P' t=A 


VP:n,A:<D. 


Pl= dA 


iffVP':n.P->*P'=>P'l=A 


VP:n,A:(D. 


PI=A@ 


iffVn: A.PI=A@/j 


VP:n,A: <D. 


PI=[>A 


iffVP':n.P|P'M 


VP:n,A,B: O. 


P t= >(A=>B) 


iff VP':n. P^P t= A => P'|P \=i (cf.P At>B) 



18. Please^mend the paragraph at pagKl3, lines 23-24 as follows: 



1^1 • A process P satisfies the A'nB formula if for every decomposition of P into processes P and P" 
r such that P = FfK? either F satisfies A' or P" satisfies B. 



19. Please amend the paragraph at pageC4ftines 13-14, as follows : 




• A process P satisfies the forh^ula >A if for every process (i.e., for every context) the 
combination of P and with thatWocess satisfies A. 



^ ^20. Please amend the paragraph at page^fimes 15-18, as follows: 



If process P satisfies the formula A > B, it naeans that in every context that satisfies A, the 
combination (of P and the context) satisfies^. Instead, if process P satisfies the formula 
>(A=>B), it means that in every context, if the c^jnbination satisfies A then the combination 
satisfies 8. 




P 



21. Please amend the paragr aph at page 24, line 22, as-follows^- 

p = P'=>(PI=A=>P'l=A) 
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22. Please amend the paragraph at page 24 line 27- page 25, line 33, as follows: 

A list of examples of the satisfaction relations is now provided. These examples should appear 
intuitively true from the definitions. 

Location 

n[) N «[T] 

/?[] | 0 t= n[T], because /?[] | 0 s n[] 
n[m[]] 1= n[m[T]] 
-,0 1= w[T] 

-i»[] 1= m[T], if n^m 

Composition 

n[]\m[]\=n[T]\m[T]. 

n[] | m[] \= m[T] | n[T], because n[] \ m[] = m[] | n[] 
n[]\P\=n[T]\T 

"U f= «[T] | T, because n[] = n[]\0 
!«[] 1= n[T] | T, because \n[] & n[] | !«[] 
-,«[] 1= n[T] | n[T] 
^[]|«[]N«[T] 
-,!/?[] t= «[T] 

| open /n t= /7[T] 

Quantification 

n[] 1= 3m.m[T] iff 3p. «[] 1= p[T] iff «[] 1= n[T] iff true 
n[m[]] 1= 3/7.h[«[T]] iff 3/?. 1= /?[/?[T]] iff false 

0 N V/7. -n»[T] 

Spatial Modality 

n[m[}) 1= ^/ti[T] 

-, n[m[] | m[]] N 4>m[T] 

Temporal Modality 

«[/«[]] | open n N 0/?j[T] 

«[»[]] I open n 1= o(/j[T) | T) 

Location Adjunct 

n[] \= m[n[T]]@m 
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n[out m] 1= (0n[T))@m 

Composition Adjunct 

n[]tm[T]t>(n[T)\m[T]) 

open n. m[] t= (d«[T]) >(0m[T]) 

Presence 

an n = «[T] | T 

no n = — /7 

one n = «[T] | /70 /? 

unique n = /7[J^wo/7]| Knon 



(there is now an « here) 

(there is now no a? here) 

(there is now exactly one n here) 

(there is now exactly one /?, and it is here) 



!(/i[T] =>*[*]) 



(every a? here satisfies A) 



23. 


Please amend the table at pasej£4, lines 40-42, as follows: 


^ satk 


= V/MI. Pt=A A is valid 

= 3P:Tl. P 1= A A is satisfiable 


24. 


Please amend the paragraph at page 26 lines 14-ltffas follows: 


ft 


Sequents: 

Ah B = v/rf(A=>B) 


25. 


Please amend the paragraph at page 26 lines 17-22^aTfollows: 



Rules: 



A,hB l ;...;A„(-B n /Al-B^ 

A, hi, A...AA n hB n =>AhB (n>0) 
A, h-B, // A 2 h-8 2 = 

A,hB,/A 2 hB 2 a A 2 hB 2 / A| hB| 
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26. Please amend the paragraph at page 26, linfcs 27-33. as follows: 



The following is a non-standard presentation of the sequent calculus, where each sequent has 
exactly one assumption and one conclusion: Ah B. This presentation is adopted because the logical 

connectives introduced later do not preserve the shape of multiple-assumption multiple-conclusion 
sequents. Moreover, in this presentation the rules of propositional logic become extremely 
symmetrical. Propositional logic is summarized in the following table. 

27. Please amend the table between page 26, line 33 and page 27, line 2, as follows: 



(A-LJ 


Aa((aD) h D // (AaC) aD h D 


{A-K) 


A h (CvD) vd // A h (v(BvB) 


(X-L) 


Aa(I-B/(aAI-B 


(X-R) 


Ah(vB/AhBv( 


(C-L) 


AaAI-B/AKB 


(C-R) 


AhBvB/Al-B 


(W-L) 
J (W-R) 


A(-B/Aa([-B 


AhB/Ah(vB 


(Id) 


/Ah A 


(Cut) 


AhMjAVd-BVAAA' hBvB' 


(T) 


AaT h B/AhB 


(F) 


AhFvB/AhB 


(-L) 


Ah(vB/AA-i(hB 


(-,-R) 


Aa(I-B/AI--i(vB 


(A) 


AhB;A'hB7AAA' I-BaB' 


(v) 


AhB;A' l-BVAvA 1 hBvB' 
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28. Please amend the paragraph at page 27, lines 6-11, as follows: 




For predicate logic the syntax of formulas (but not of processes) is enriched with variables 
^ ranging over names. These variables are indicated by letters x f v, z. Quantifiers bind variables, not 
^ names. Then, if /v(A)={jt/, •*> x k) are the free variables of A and q>e/v(A) — >A is a substitution of 
variables for names, A^ for A {xi<— cp(.ti), .... cp(x*)} is written, and the following is defined: 



29. Please amend the table at page 27, be 



twfetiiTl 



lines 11 and 15, as follows: 



(V-L) A {x<-m} hB/Vx.A hB 

(V-R) AhB/AhVx.B 

(3-L) AhB /3x. AhB 

(3-R) AhB {x<-m} / Ah 3jc.B 



Where x <t /v(A) 
Where x € >(B) 



30. 



Please amend the table at page 28, Between lines 7 and 10, as follows: 




I (0) 


/ThOAo-,D^A 


<*) 


/Th mAc^^m-,A 




~7Tho(4^8^ (nA dB) 


(« K) 


/Th h(A =>B) => (nA => mB) 


ulY)* (DT) 


/ T h oA => A — 


(HT) 


/Th hA=>A 


/ T h oA => ddA 




/Th hA=> m hA 




A h B / dA h dB 


(n M) 


"ThlT^U^nB 


P CA) 


o(Aa() h B // dAad( h B 


(H A ) 


« (Aa() h B // hAa5TH*^^^ 


(□V) 


Ah □((vB)//AhD(vDB 


(H v) 


A h n ((vB) // A h n ( v h B ^^^-^^^^ 
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31. Please amend the paragraph at page 28, line 17- page 29, line 10, as follows: 

Finally, location properties, location rules, composition properties, and composition rules are 

listed. 

Location Properties 

(1) vld («[AaB] <=> /i[A] a/?[B]) 

(2) W</(h[AvB]<=>/j[A]vh[B]) 

Location Rules 

(«[]) A h B // «[A] h /j[B] 

(/j[]a) /»[AA(]r-B//«[A]A«[(] hB 

(/?[]a) Ar-/j[(vB]//Al-n[(]v/i[B] 

Composition Properties 



(1) v/</(A|B=>B|A) 



(2) v/</(A|(l|Q<» (A|B)|() 

(3) v/</((AaB)|(=>A|(aB|() 

(4) v/</((AvB)|(=>A|(vB|() 



Composition Rules 



(I) 

(I A) 

(|v) 



A' h B'; A" I- B" / A* | A" r- B* | B 
(AaB)|(I-D/A|(aB|(I-0 
Ar-(Bv()|D/AhB|Ov(|D 



(l-E) 



(I [?]11) 



/A' | A" a B' || B" h-A' | B" vB' | A" 
/ -.(A' | A") a -n(B' | B") h -i(B' | A") v (-.A' | -J") 
A I — B* | B"; A'a(B' I (") I" D; A"a(C | B") h 0 



/ (Aa(A'aA"))a(C II (") h- tt 
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32. Please amend the paragraph at page 2% lines 14-30, as follows: 



The following propositions and corollaries relate to location adjunct rules, and composition 

adjunct rules. The first proposition states that k@n and /?[A] are adjuncts. 

Proposition: Location Adjunct Rules 
(n[]@) n[k] hB//Ah l@n 

Corollaries 
(1) vldn[k@n]=>k 
y (2) vidk^n[k]@n 

Proposition: Composition Adjunct Rules 
(|>) A|(hB//Al-(>B 

Corollaries 

(1) v/</A>B|B=>B 

(2) v/</A^Bt> (AB) 

(3) v/f/A >B 1 6 >( =>A >C 



33. Please amend the paragraph at page 29, lines 34-39, as follows: 



In this sub-section, validity and satisfiability are reflected into the logic, by means of the > 



Jl operator: 

* Vldk A (_J)> F 

Sat A 4 _^ k> F) 
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34. Please amend the paragraph at page 30, linesU^22, as follows: 

From this validity and satisfiability, two propositions and one lemma are described: 

Proposition: Vld and Sat 

(1) vldVldhovldk 

(2) vld Sat sat k 

Lemma: Vld, Sat Properties 

( 1 ) vld ( kW(AaB) <=> KM a Vldi) 

(2) vld(Vld{kvl) o Vldk v K«B) 

Proposition: KW, So/ is Modal S5 

(Sat) /T\-Satko^VId^k 

( Vld K) / T t- KW(A =>!)=>(( Weft) => ( F/c/B)) 

( Vld T) /Tr-(KWA)=>A 

( KW 5) / T h (Sa/A) => ( K/rf Sat A) 

(KWM) A h B / Vldk h FWB 

( Vld a) K«(AaQ h B // Vldk a KM I- B 

( Vld v) A h // A h KW( v K/d) 



35. Please amend the paragraph at page 30, Ime 30, as follows: 



,ftie30, 



^ m-n = Vld{an m x>an n) 



36. Please amend the paragraph at page 31. \\ttf$2~l* as follows: 



In this section of the detailed description, examples of mobile computing environments in 
conjunction with the modal logic of the preceding section are presented. Specifically, four separate 
^ situations are shown in the diagram of FIG. 4, and an additional situation is shown in the diagram of 
FIG. 5. Those of ordinary skill within the art can appreciate that the situations of FIGs. 4 and 5 are 
examples for illustrative purposes only, and do not represent a limitation on the invention. 
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37. Please amend the paragraph at page 3i, lines 8-18, as follows: 

Referring first to FIG. 4, four situations are presented, situations 600, 602, 604 and 606. In 
situation 600, a container n includes a process Q, and includes a policy telling the container how to 
behave. Specifically, the policy is in m.P, which instructs the container // including the process Q to 
move into the container m already having the policy R therein, as shown in situation 600. In situation 
^ 602, a con.ainer „ inch*, a process ft and ,he policy ,e„i„ g ,he container how ,o behave is „„, m .P, 
3 which instructs the container n including the process Q to move out of the container m also having the 
policy R therein, as shown. In situation 604, the policy or instruction open n.P is executed on the 
container n having the process Q, such that Q exits the container «asa result. Finally, in situation 
606, a replicated instruction is executed on the process P, such that an additional process P is made 
(that is, process P is copied). 

38. Please amend the paragraph at page^ljline 19-23, as follows: 



Referring next to FIG. 5, a communication operation referred to as a note is shown in the 
^ situation 700. The note can reside within a container. The capabilities that can be held by the note 
include names, such as /7, as well as action capabilities, such as in n, out n, open n, or a path, such as 
C.C\ as has been described in the modal logic section of the detailed description. 



39. Please amend the paragraph at page 32, line 22- page 33, line 8. as follows: 

302, 304, 306, 308, 3 1 0, 3 1 2, and 3 1 4 implement the analysis of the process against a formula, 
using a predetermined modal logic based on ambient calculus, according to one embodiment of the 
invention. The formula against which the process is to be analyzed can be a policy, such as a security 
^ policy or a mobility policy, such that the policy is described using the predetermined modal logic, such as 

ihas been described in the preceding sections of the detailed description. In one embodiment, the process 
is analyzed in a recursive manner. The analysis of 302, 304, 306, 308, 310, 312, and 314 can be 

summarized as a theorem, specifically, for all replication-free process P and >-free closed formulas A, P 
l=k if and only ifCheck(PA), where CheckQ is the analysis oj 302, 304, 306, 308, 3 J0 t 312, and 314, 
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40. Please amend the paragraph at page 34,-rfnes 1-4 as follows: „ 

In 306 specifically, the process is partitioned to determine whether each component of the 
process satisfies the formula, or policy. If any component fails against the policy, then the process 
itself fails. The check of 306 only applies if the formula is a composition A|B. This check can be 
expressed as: 
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